PT-2024-17681
CVE-2024-12632
·
Published
2024-12-13
·
Updated
2024-12-13
Description by
Score
N/A
Not availableNo severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Cleo Harmony versions up to and including 5.8.0.21
VLTrader versions up to and including 5.8.0.21
LexiCom versions up to and including 5.8.0.21
Description
The issue concerns an unrestricted file upload and download, which could potentially lead to remote code execution.
Recommendations
For Cleo Harmony versions up to and including 5.8.0.21, restrict file upload and download capabilities to prevent remote code execution.
For VLTrader versions up to and including 5.8.0.21, restrict file upload and download capabilities to prevent remote code execution.
For LexiCom versions up to and including 5.8.0.21, restrict file upload and download capabilities to prevent remote code execution.
Found an issue in the description? Have something to add? Feel free to write us 👾